[Samba] I can't get Win10 clients to sync time with the DC
sergio at serjux.com
Fri Nov 15 22:16:15 UTC 2019
On Thu, 2019-11-14 at 19:54 +0100, Viktor Trojanovic via samba wrote:
> I'm running a Samba AD DC v4.9.9 with Windows 10 clients connected to
> and just noticed that the clients are not synchronizing time with the
> server. I'm not sure why not.
> My setup is a bit special in that the DC is running inside a
> linux container. For that reason, it's not possible or necessary for
> container to correct the system clock, this is done on the container
> using ntp. But the DC should provide time to clients connected to the
> domain just as in a regular setup.
> Naturally, I followed the guide in the wiki with the exception that I
> didn't set external servers to get time from. My ntp.conf looks like
> (it really is called ntp.conf on Ubuntu, not ntpd.conf):
> server 127.127.1.0
> fudge 127.127.1.0 stratum 1
> driftfile /var/lib/ntp/ntp.drift
> ntpsigndsocket /var/lib/samba/ntp_signd
> restrict -4 default kod notrap nomodify nopeer noquery limited mssntp
> restrict -6 default kod notrap nomodify nopeer noquery limited mssntp
> restrict 127.0.0.1
> restrict ::1
> tinker panic 0
> I've checked and rechecked this configuration, I can't see an issue
> it. And ntpd does seem to start properly:
> Nov 14 16:58:45 DC1 ntpd: ntpd 4.2.8p10 at 1.3728-o (1): Starting
> Nov 14 16:58:45 DC1 ntpd: Command line: /usr/sbin/ntpd -p
> /var/run/ntpd.pid -g -u 111:118
> Nov 14 16:58:45 DC1 systemd: Started Network Time Service.
> Nov 14 16:58:45 DC1 ntpd: proto: precision = 0.073 usec (-24)
> Nov 14 16:58:45 DC1 ntpd: MS-SNTP signd operations currently
> ntpd degrading service to all clients.
> Nov 14 16:58:45 DC1 ntpd: Listen and drop on 0 v6wildcard
> Nov 14 16:58:45 DC1 ntpd: Listen and drop on 1 v4wildcard
> Nov 14 16:58:45 DC1 ntpd: Listen normally on 2 lo
> Nov 14 16:58:45 DC1 ntpd: Listen normally on 3 eth0
> Nov 14 16:58:45 DC1 ntpd: Listen normally on 4 lo [::1]:123
> Nov 14 16:58:45 DC1 ntpd: Listen normally on 5 eth0
> Nov 14 16:58:45 DC1 ntpd: Listening on routing socket on fd
> #22 for
> interface updates
> The command ntpq shows that the local clock is accepted to be
> root at DC1:~# ntpq -pn
> remote refid st t when poll
> reach delay offset
> *127.127.1.0 .LOCL. 1
> l 30 64 377 0.000 0.000
> On the Windows client, I can query the server alright:
> C:\WINDOWS\system32>w32tm /monitor
> DC1.samdom.example.com *** PDC ***[192.168.1.2:123]:
> ICMP: 0ms delay
> NTP: +0.0000000s offset from DC1.samdom.example.com
> RefID: (unknown) [0x00017F7F]
> Stratum: 2
> C:\WINDOWS\system32>w32tm /stripchart /computer:dc1 /dataonly
> Tracking dc1 [192.168.1.2:123].
> Collecting 5 samples.
> The current time is 14.11.2019 19:39:49.
> 19:39:49, -02.9196934s
> 19:39:51, -02.9197052s
> 19:39:53, -02.9197256s
> 19:39:55, -02.9197882s
> 19:39:57, -02.9197818s
> However, when I run w32tm /resync /rediscover, it complains that "The
> computer did not resync because no time data was available."
I got the same error when tried to switch from ntpd to chrony , I'd
like understand the root cause of this error
Chrony is the default ntp on RedHat systems since 2011 
> I tried so many things on the PC. Restarting the time service,
> unregistering the service and registering it again, checking that the
> service is not configured by group or local policy (it is not),
> w32tm /config /syncfromflags:domhier /update, and last but not least,
> rebooting to no end.
> This is not on a laptop, this is happening on computers constantly
> connected to the host and therefore the DC via ethernet.
> Oh, and before I forget, here is my smb.conf, though the AD is
> functioning without issues:
> dns forwarder = 192.168.1.1
> netbios name = DC1
> realm = SAMDOM.EXAMPLE.COM
> server role = active directory domain controller
> workgroup = SAMDOM
> idmap_ldb:use rfc2307 = yes
> path = /var/lib/samba/sysvol/samdom.example.com/scripts
> read only = No
> path = /var/lib/samba/sysvol
> read only = No
> I'd really appreciate a nudge in the right direction.
Sérgio M. B.
More information about the samba